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CLAIMS 

1. A method of performing modular multiplication of integers X 
and Y to produce a result R, where R = X.Y mod N, in a multiplication 
engine, comprising the steps of: 

(a) fragmenting X into a first plurality of words Xn each having a first 
predetermined number of bits, k; 

(b) fragmenting Y into a second plurality of words y n each having a 
second predetermined number of bits, m; 

(c) pre-calculating multiples of a word x n of X in a pre-calculation circuit 
and using said pre-calculated multiples to derive products of the word x n of X 
with each of the plurality of words y n of Y; 

(d) computing an intermediate result Rj as a cumulating sum derived from 
said pre-calculated multiples; 

(e) for each successive word of X, repeating the steps of pre-calculating 
and computing so as to generate successive intermediate results, Rj, for 
each of the first plurality of words x n ; and 

(f) providing as output each of the intermediate results Rj so as to form a 
final result 

2. The method of claim 1 in which X is fragmented into n words of 
k bits each, according to the expression X = x n -iB x n " 1 + Xn- 2 B x n ' 2 + ... + Xo, 
where B x = 2 k . 

3. The method of claim 1 in which Y is fragmented into n words of 
m bits each, according to the expression Y = y n -iB y n " 1 + y^By 0 " 2 + ... + y 0 , 
where By = 2 m . 

4. The method of claim 1 in which the step of computing an 
intermediate result Rj comprises generating a succession of terms x.y + c + z 
for addition, comprising the steps of: 
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(i) reading a pre-calculated multiple of a word x n of X to form an x n .y n 
product, 

(ii) adding a carry word q, from a previous term; 

(iii) adding a corresponding term, z, from a previous intermediate result; 

(iv) fragmenting the result into a lower order m-bit word and a higher 
order, k-bit carry word; 

(v) repeating steps (i) to (iv) for each of the Xn.y n products; and 

(vi) after use of all x n .y n products, forming a final term by adding the final 
carry word and corresponding term from the previous intermediate result. 

5. The method of claim 4 wherein the step of computing the 
intermediate result is implemented as: 

Rj = Xn-j +1 yo + (x n - j+ iyi + rj-i, 0 )By + (x n . j+ iy 2 + r H ,i)B y 2 + + (Xn. 

j+ iy n -i + r Ht n- 2 ) B y n_1 + r Hl n-i) B y n 

6. The method of claim 1 in which step (f) further includes 
combining all the intermediate results Rj to form R, according to the 
expression 

R = ((((*n-iY mod N )B X + x^Y) mod N)B X + ...XqY) mod N. 

7. The method of claim 4 in which step (i) comprises the steps of 
reading selected basic multiples of the word x„ of X and combining them to 
obtain the product x n .y n . 

8. The method of claim 7 in which steps (i), (ii) and (iii) include 
combining the selected basic multiples of the word of X, the carry word q, 
and the corresponding term z in an adder circuit (70). 
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9. The method of claim 4 in which the corresponding term z from 
a previous intermediate result is the immediate less significant word from the 
previous intermediate result. 

10. The method of claim 4 in which the corresponding term z from . 
a previous intermediate result is a (k/m)th less significant word from the 
previous intermediate result. 

11. The method of claim 1 in which the steps of pre-calculating 
comprise the steps of: 

calculating pre-selected basic multiples of the word of X and 
combining selected ones of the basic multiples to form a desired x.y product 

12. The method of claim 4 in which the pre-calculation of multiples 
of a word of X takes place during step (vi) for the previous word. 

13. Apparatus for performing modular multiplication of integers X 
and Y to produce a result R, where R = X.Y mod N, comprising: 

means for fragmenting X into a first plurality of words x n each having a 
first predetermined number of bits, k; 

means for fragmenting Y into a second plurality of words y n each 
having a second predetermined number of bits, m; 

a pre-calculation circuit (10) for pre-calculating multiples of a word x n 
of X and using said pre-calculated multiples to derive products of the word x n 
of X with each of the plurality of words y n of Y; 

means for computing an intermediate result Rj as a cumulating sum 
derived from said pre-calculated multiples; and 

control means for controlling repetition of the pre-calculations and 
computing of an intermediate result for each successive word of X so as to 
generate successive intermediate results, Rj, for each of the first plurality of 
words Xn f 
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14. The apparatus of claim 13 in which the means for computing 
an intermediate result Rj generates a succession of terms x.y + c + z for 
addition, including: 

(i) means (60) for reading a pre-calculated multiple of a word x of X to 
form an x.y product, 

(ii) means (70) for adding a carry word q, from a previous term; 

(iii) means (70) for adding a corresponding term, z, from a previous 
intermediate result; 

(iv) means for fragmenting the result into a lower order m-bit word and a 
higher order, k-bit carry word; 

(v) control means for effecting repetition of the reading of a pre- 
calculated multiple and addition of the carry word and corresponding term for 
each of the x.y products and forming a final term by adding the final carry 
word and corresponding term from the previous intermediate result. 

15. A calculation circuit (10) for providing each of a plurality of 
multiples of an integer x, to form products x.y, comprising: 

adder and shift circuits (30, 50) for deriving a plurality of basic 
multiples of x; 

a plurality of registers (20) for storing at least some of said plurality of 
basic multiples of x; 

a plurality of multiplexers (60, 160) each receiving said basic multiples 
of x, each multiplexer having selection lines (Y) for receiving selected bits of 
a selected y word; and 

a summation circuit (70, 161... 181) for receiving the outputs from 
each multiplexer and combining them according to the numeric significance 
of the portion of the y word used as input to the respective multiplexer 
selection line. 

16. The calculation circuit of claim 15 in which the plurality of 
registers (20) correspond to selected odd basic multiples of x, even basic 
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multiples of x being provided to each multiplexer by bit shifting lines (50) 
coupled to selected ones of the plurality of registers. 

1 7. The calculation circuit of claim 1 5 in which: 

the plurality of multiplexers comprises a set of logic gates (161. ..167) 
each having a first input (xj) connected to receive a respective basic multiple 
of x, and a selection line (Si) to enable assertion of the basic multiple at an 
output thereof, and 

the summation circuit comprises a series of adders (161.. .181) for 
receiving all asserted outputs of the series of logic gates, 

wherein only logic gates in the set of logic gates for which a selection 
input has changed will be switched during a change in the selected y word. 

18. A computer program product, comprising a computer readable 
medium having thereon computer program code means adapted, when said 
program is loaded onto a computer, to make the computer execute the 
procedure of any one of claims 1 to 12. 

19. A computer program, distributable by electronic data 
transmission, comprising computer program code means adapted, when 
said program is loaded onto a computer, to make the computer execute the 
procedure of any one of claims 1 to 12. 



